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AMENDMENT 

Please amend the above-identified application as follows: 
Amendments to the Claims : 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

What is claimed is: 

1 . (Currently Amended) A method for establishing trust in an email client, the 
method comprising: 

accepting in an email server a data communications connection from an email 
client, wherein the connection includes the email client's network address; 

determining from a stored list of trusted network addresses whether the email 
client is trusted according to the email client's network address; 

if the email client is not trusted according to the email client's network address, 
receiving authentication data from the email client and determining whether the 
email client is trusted according to the authentication data; and 

if the email client is not trusted according to the email client's network address 
and the email client is not trusted according to the authentication data, receiving a 
sender domain name for an email message from the email client and determining 
whether the email client is trusted according to the sender domain namer , wherein 
determining whether the email client is trusted according to the sender domain 
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name further comprises requesting from a domain name service a resource record 
of a type that lists for a sender domain network addresses of email exchanges that 
are authorized to act as outbound email exchanges for the sender domain. 

2. (Cancelled) 

3. (Original) The method of claim 1 wherein determining whether the email client is 
trusted according to the sender domain name further comprises determining 
whether a domain name service resource record associates the email client's 
network address with the sender domain name, the DNS resource record being of 
a type that lists for a sender domain network addresses of email exchanges that 
are authorized to act as outbound email exchanges for the sender domain. 

4. (Original) The method of claim 1 wherein the email client is trusted according to 
the authentication data, and the method further comprises storing the email 
client's network address in association with a trust time limit in the list of trusted 
network addresses. 

5. (Original) The method of claim 1 further comprising: 

accepting in the email server a connection from an email client requesting 
delivery of an email message according to a protocol that includes client 
authentication, wherein the connection includes the network address of the email 
client requesting delivery of an email message; 

authenticating the email client requesting delivery of an email message; 

delivering the email message to the email client requesting delivery of an email 
message; and 
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storing the network address of the email client requesting delivery of an email 
message in association with a trust time limit in the list of trusted network 
addresses. 

6. (Original) The method of claim 1 wherein the email client is an email exchange 
that accepts outbound email messages only from trusted senders. 

7. (Original) The method of claim 1 wherein receiving a sender domain name 
further comprises receiving the sender domain name in an SMTP MAILFROM 
message. 

8. (Original) The method of claim 1 wherein the email client is not trusted 
according to the email client's network address, the email client is not trusted 
according to the authentication, the email client is not trusted according to the 
sender domain name, and the method further comprises sending an error message 
to the email client and closing the connection. 

9. (Currently Amended) A system for establishing trust in an email client, the 
system comprising: 

means for accepting in an email server a data communications connection from an 
email client, wherein the connection includes the email client's network address; 

means for determining from a stored list of trusted network addresses whether the 
email client is trusted according to the email client's network address; 

means for receiving authentication data from the email client and means for 
determining whether the email client is trusted according to the authentication 
data if the email client is not trusted according to the email client's network 
address; and 
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means for receiving a sender domain name for an email message from the email 
client and means for determining whether the email client is trusted according to 
the sender domain name if the email client is not trusted according to the email 
client's network address and the email client is not trusted according to the 
authentication datar , wherein means for determining whether the email client is 
trusted according to the sender domain name further comprises means for 
requesting from a domain name service a resource record of a type that lists for a 
sender domain network addresses of email exchanges that are authorized to act as 
outbound email exchanges for the sender domain. 

10. (Cancelled) 

1 1 . (Original) The system of claim 9 wherein means for determining whether the 
email client is trusted according to the sender domain name further comprises 
means for determining whether a domain name service resource record associates 
the email client's network address with the sender domain name, the DNS 
resource record being of a type that lists for a sender domain network addresses of 
email exchanges that are authorized to act as outbound email exchanges for the 
sender domain. 

12. (Original) The system of claim 9 wherein the email client is trusted according to 
the authentication data, and the system further comprises means for storing the 
email client's network address in association with a trust time limit in the list of 
trusted network addresses. 

13. (Original) The system of claim 9 further comprising: 

means for accepting in the email server a connection from an email client 
requesting delivery of an email message according to a protocol that includes 
client authentication, wherein the connection includes the network address of the 
email client requesting delivery of an email message; 
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means for authenticating the email client requesting delivery of an email message; 

means for delivering the email message to the email client requesting delivery of 
an email message; and 

means for storing the network address of the email client requesting delivery of an 
email message in association with a trust time limit in the list of trusted network 
addresses. 

14. (Original) The system of claim 9 wherein the email client is an email exchange 
that accepts outbound email messages only from trusted senders. 

15. (Original) The system of claim 9 wherein means for receiving a sender domain 
name further comprises means for receiving the sender domain name in an SMTP 
MAILFROM message. 



16. (Original) The system of claim 9 further comprising means for sending an error 
message to the email client and means for closing the connection if the email 
client is not trusted according to the email client's network address, the email 
client is not trusted according to the authentication, and the email client is not 
trusted according to the sender domain name. 



17. (Currently Amended) A computer program product for establishing trust in an 
email client, the computer program product comprising: 



a recording medium; 



means, recorded on the recording medium, for accepting in an email server a data 
communications connection from an email client, wherein the connection includes 
the email client's network address; 
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m ea„s, recorded on the recording medinm, for determining from a stored lis. of 
trnsted network addresses whether the email client is trnsted according to the 
email client's network address; 

means, recorded on the recording medium, for receiving authentication data from 
the email client and means, recorded on the recording medium, for determining 
whether the email client is trusted according to the authentication data if the email 
client is not trusted according to the email client's network address; and 

means, recorded on the recording medium, for receiving a sender domain name 
for an email message from the email client and means, recorded on the recording 
medium, for determining whether the email client is trusted according to the 
sender domain name if the email client is not trusted according to the email 
client's network address and the email client is not trusted according to the 
authentication data? , wherein means, recorded on the recording medium, for 
determining wh ether the email client i s trusted accordi ng to the send er domain 
nam e furthe r comprises m eans, recorded on the recording medium, for r e questing 
from a doma i n name service a resour ce record of a type that lists for a sender 
d omain n etwork addresses of email e x changes that are authorized to ac t as 
outbound email exc hanges f or the sender domain. 



18. (Cancelled) 



19. (Original) The computer program product of claim 17 wherein means, recorded 
on the recording medium, for determining whether the email client is trusted 
according to the sender domain name further comprises means, recorded on the 
recording medium, for determining whether a domain name service resource 
record associates the email client's network address with the sender domain name, 
the DNS resource record being of a type that lists for a sender domain network 
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addresses of email exchanges that are authorized to act as outbound email 
exchanges for the sender domain. 

20. (Original) The computer program product of claim 17 wherein the email client is 
trusted according to the authentication data, and the computer program product 
further comprises means, recorded on the recording medium, for storing the email 
client's network address in association with a trust time limit in the list of trusted 
network addresses. 

21. (Original) The computer program product of claim 17 further comprising: 

means, recorded on the recording medium, for accepting in the email server a 
connection from an email client requesting delivery of an email message 
according to a protocol that includes client authentication, wherein the connection 
includes the network address of the email client requesting delivery of an email 

message; 

means, recorded on the recording medium, for authenticating the email client 
requesting delivery of an email message; 

means, recorded on the recording medium, for delivering the email message to the 
email client requesting delivery of an email message; and 

means, recorded on the recording medium, for storing the network address of the 
email client requesting delivery of an email message in association with a trust 
time limit in the list of trusted network addresses. 

22. (Original) The computer program product of claim 1 7 wherein the email client is 
an email exchange that accepts outbound email messages only from trusted 
senders. 
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23. (Original) The computer program product of claim 17 wherein means, recorded 
on the recording medium, for receiving a sender domain name further comprises 
means, recorded on the recording medium, for receiving the sender domain name 
in an SMTP MAILFROM message. 

24. (Original) The computer program product of claim 1 7 further comprising means, 
recorded on the recording medium, for sending an error message to the email 
client and means, recorded on the recording medium, for closing the connection if 
the email client is not trusted according to the email client's network address, the 
email client is not trusted according to the authentication, and the email client is 
not trusted according to the sender domain name. 
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